RESILIA® Foundation and Practitioner

Who is this course for

• The RESILIA qualification is aimed at core business functions including HR, finance, procurement, operations and marketing, as well as IT and security functions - everyone and everything is involved in risk and compliance.
• Please note that this is a theory based best practice Cyber Resilience course and not a hand's on technical Cyber Security course.

Purpose of this course

To help prevent, detect and recover from attacks, RESILIA aims to incorporate best-practice security into existing management systems to improve immunity and increase robustness. As well as to attain both the Foundation & Practitioner level examinations.

You will learn how to

• Categorise and safeguard an organisation's assets
• Identify and manage cyber resilience risks
• Use the RESILIA framework to integrate security concerns with the service management lifecycle
• Plan a strategy that embeds control objectives and interactions with ITSM activities
• Understand the roles and organisational structures that contribute to cyber resilience
• Create a common language across IT and non-IT teams to synergise all organisational staff with security responsibilities
• Demonstrate governance through controlling, monitoring and reporting activities
• Be less of an easy target, and face common attacks with confident preparation

Benefits for your organisation

Organisations that recognise that information security and cyber resilience starts with the management approach and want to ensure focussed initiatives and real ROI by spending where it is needed most. Gaining staff that not only understand how to integrate cyber into common practice but understand that a balanced approach rather than just 'toys for the techies' is a key goal.

Benefits for you as an individual

Be able to demonstrate greater insight in to how Cyber Resilience should be implemented and practiced in your organisation. Support your organisations objectives by directing cyber resilience activities as a manager. Obtain an industry recognised qualification that expands on your existing knowledge and expertise in managing IT services.

Prerequisites

There are no formal pre-requisites for this course, but a fundamental knowledge of ITIL provides a strong advantage.

Intro to Cyber Resilience

• What is cyber resilience?
• What are the benefits of cyber resilience?
• Cyber-resilience terminology and the purpose of balancing
• Confidentiality, integrity, availability, authentication, non-repudiation

Risk management

• Risk management and why it is needed
• Understand assets, vulnerabilities, threats, risk
• How to address risks and opportunities

Managing Cyber Resilience

• The purpose, scope and components of a management system
• Relevance of common standards and frameworks to cyber resilience
• Management, governance and compliance

Cyber Resilience Strategy

• The goal of cyber resilience strategy
• Cyber resilience activities aligned with IT service strategy, including control objectives
• Interactions between ITSM strategy processes and cyber resilience

Cyber Resilience Design

• The goal of cyber resilience design
• Cyber resilience activities aligned with IT service design, including control objectives
• Interactions between ITSM design processes and cyber resilience

Cyber Resilience Transition

• The goal of cyber resilience transition
• Cyber resilience activities aligned with IT service transition, including control objectives
• Interactions between ITSM transition processes and cyber resilience

Cyber Resilience Operation

• The goal of cyber resilience operation
• Cyber resilience activities aligned with IT service operation, including control objectives
• Interactions between ITSM operation processes and cyber resilience

Cyber Resilience Continual Improvement

• The goal of cyber resilience improvement
• Maturity models and their purpose
• Cyber resilience activities aligned with CSI, including the 7-step improvement process
• Interactions between ITSM CSI and cyber resilience

Cyber Resilience Roles & responsibilities

• Segregation of duties
• Dual controls

Establishing practice for

• Risk Management
• Lifecycle Management
• Appropriate organisational structure
• Create and manage a risk register and cyber resilience plan
• Apply appropriate organisational structure and roles to cyber resilience
• Stakeholder identification, management and communication

Exam preparation

• RESILIA Practitioner exam
• Practice in taking scenario based exam paper